Req #26076 [Opn->Ana]: openssl_pkcs7_verify should output the verified mail
| From: | kalle@php.net | Date: | Tue, 24 Oct 2017 01:41:16 +0000 |
| Subject: | Req #26076 [Opn->Ana]: openssl_pkcs7_verify should output the verified mail | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-211869@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=26076&edit=1
ID: 26076
Updated by: kalle@php.net
Reported by: ivan dot dolezal at vsb dot cz
Summary: openssl_pkcs7_verify should output the verified mail
-Status: Open
+Status: Analyzed
Type: Feature/Change Request
Package: OpenSSL related
Operating System: *
PHP Version: *
Block user comment: N
Private report: N
Previous Comments:
------------------------------------------------------------------------
[2011-04-24 19:19:53] mo at nevali dot net
openssl_pkcs7_verify does nowadays include an optional parameter to output the
cleartext version of the message to a file â HOWEVER, this parameter cannot be
used unless the preceding parameters are ALSO used.
This is because although they are optional, there is no default value for the
$extracerts parameter which can be specified explicitly. The implementation
checks to see whether the C string (char * extracerts) is NULL or not, which it
will never be if the parameter is actually specified (even if it's a PHP null
value, as this will be coerced to the empty string).
This is a slightly awkward problem if you don't actually have any extra
certificates.
------------------------------------------------------------------------
[2003-11-02 04:52:52] wez@php.net
Already have plans to implement this.
------------------------------------------------------------------------
[2003-11-02 02:17:03] ivan dot dolezal at vsb dot cz
Description:
------------
The openssl_pkcs7_verify is able to verify signed e-mail, but I can't get the verified message
out of it to process it further.
As OpenSSL shell does have this functionality: switch "-text" in...
openssl smime -verify -CApath /etc/ssl/certs/ -in signedmessage.txt -text
...outputs the message to STDOUT.
Expected result:
----------------
a new optional parametr called by reference in the function openssl_pkcs7_verify, that would output
the message from the e-mail
Actual result:
--------------
Currently there is no (documented) way to get the verified message out of S/MIME. I can verify the
message, find out, who signed it (with other functions), but I can't process the message from
the mail.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=26076&edit=1